CERTIFIED-IN-CYBERSECURITY Question #286: Real Exam Question with Answer & Explanation

Question

Which of the following is a key component of a Business Continuity Plan (BCP)?

Options

• AFocusing solely on the prevention of incidents, rather than maintaining operations during a
• BDeveloping strategies to maintain essential operations during and after a major incidenT
• CAvoiding the use of offsite facilities or alternative work locations
• DIgnoring the need for an incident response plan

Explanation

A key component of a business continuity plan (BCP) is developing strategies to maintain essential operations during and after a major incident (see the ISC2 Study Guide, Module 2, under The Importance of Business Continuity). This includes identifying critical business functions, determining acceptable downtime for each, and establishing procedures to restore operations within that timeframe. For example, a BCP might include a strategy for shifting operations to a secondary site or allowing employees to work remotely during a major incident such as a natural disaster or cyber attack. The remaining options are incorrect because they do not reflect the key components of a business continuity plan. Focusing solely on preventing incidents, rather than maintaining operations during a disruption, does not provide the organization with the necessary strategies to maintain operations during a disruption. Avoiding the use of offsite facilities or alternate work locations does not provide the organization with the necessary strategies to maintain operations during a disruption.

No community discussion yet for this question.